mirror of
https://github.com/phishingclub/phishingclub.git
synced 2026-05-22 07:57:00 +02:00
Ronni Skansing
103 lines
3.3 KiB
YAML
103 lines
3.3 KiB
YAML
name: Release Build and Upload
|
|
|
|
on:
|
|
push:
|
|
tags:
|
|
- "v*.*.*"
|
|
|
|
jobs:
|
|
build-and-release:
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
contents: write
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 1
|
|
|
|
- name: Set up Docker
|
|
uses: docker/setup-buildx-action@v3
|
|
|
|
- name: Extract version from tag
|
|
id: get_version
|
|
run: |
|
|
echo "VERSION=${GITHUB_REF#refs/tags/v}" >> $GITHUB_OUTPUT
|
|
echo "TAG=${GITHUB_REF#refs/tags/}" >> $GITHUB_OUTPUT
|
|
echo "HASH=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT
|
|
|
|
- name: Build frontend files
|
|
working-directory: frontend
|
|
run: |
|
|
sudo docker run --rm \
|
|
-v "$(pwd)":/app \
|
|
-w /app \
|
|
node:alpine \
|
|
sh -c "npm ci && npm run build-production"
|
|
|
|
- name: Move frontend build to backend
|
|
run: |
|
|
rm -rf backend/frontend/build
|
|
mkdir -p backend/frontend/build
|
|
cp -r frontend/build/* backend/frontend/build/
|
|
|
|
- name: Build single binary with all features
|
|
run: |
|
|
sudo docker run --rm \
|
|
-v "$(pwd)":/app \
|
|
-w /app/backend \
|
|
-e CGO_ENABLED=1 \
|
|
golang:1.24 \
|
|
go build -trimpath \
|
|
-ldflags='-X github.com/phishingclub/phishingclub/version.hash=ph${{ steps.get_version.outputs.HASH }} -X github.com/phishingclub/phishingclub/version.version=${{ steps.get_version.outputs.VERSION }}' \
|
|
-tags production -o ../build/phishingclub main.go
|
|
|
|
- name: Fix build directory permissions
|
|
run: |
|
|
sudo chown -R $USER:$USER build/
|
|
chmod 755 build/
|
|
ls -la build/
|
|
|
|
- name: Sign binary with Ed25519
|
|
run: |
|
|
# Create directory for keys
|
|
mkdir -p /tmp/keys
|
|
chmod 700 /tmp/keys
|
|
|
|
# Save both private keys from GitHub secrets
|
|
echo "${{ secrets.SIGNKEY_1 }}" > /tmp/keys/private1.pem
|
|
echo "${{ secrets.SIGNKEY_2 }}" > /tmp/keys/private2.pem
|
|
chmod 600 /tmp/keys/private1.pem
|
|
chmod 600 /tmp/keys/private2.pem
|
|
|
|
# Sign binary with primary key (Key 1)
|
|
openssl pkeyutl -sign -inkey /tmp/keys/private1.pem \
|
|
-rawin -in build/phishingclub \
|
|
-out build/phishingclub.sig
|
|
|
|
# Clean up keys
|
|
rm -rf /tmp/keys
|
|
|
|
- name: Create compressed package with signature
|
|
run: |
|
|
mkdir -p packages
|
|
|
|
# Package binary with signature
|
|
tar -czf packages/phishingclub_${{ steps.get_version.outputs.VERSION }}.tar.gz \
|
|
-C build \
|
|
phishingclub \
|
|
phishingclub.sig
|
|
|
|
- name: Create GitHub Release
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
run: |
|
|
gh release create ${{ steps.get_version.outputs.TAG }} \
|
|
./packages/phishingclub_${{ steps.get_version.outputs.VERSION }}.tar.gz \
|
|
--title "PhishingClub ${{ steps.get_version.outputs.TAG }}" \
|
|
--notes "PhishingClub release ${{ steps.get_version.outputs.TAG }}"
|
|
|
|
- name: Notify about release
|
|
run: |
|
|
curl -d "phishingclub version ${{ steps.get_version.outputs.VERSION }} has been released on GitHub" https://ntfy.sh/phishing_club_released
|